
$ rpki-client -vvf rpki.apnic.net/member_repository/A912F535/69A58078BA6611EEBC39626EC4F9AE02/A3048576EC3911EEA6178B13C4F9AE02.roa
File: A3048576EC3911EEA6178B13C4F9AE02.roa (raw, json)
Hash identifier: X7fAABSVSD+9LU6mpGruwkT6PSiZnr5qD+C8yW0gUJw=
Subject key identifier: B3:B7:53:38:57:40:FD:F1:E2:37:E8:32:1E:56:E6:F1:02:C4:4B:C4
Certificate issuer: /CN=A912F535/serialNumber=D48CED18F68CA226983F9F999A140636275B6A55
Certificate serial: 01B6
Authority key identifier: D4:8C:ED:18:F6:8C:A2:26:98:3F:9F:99:9A:14:06:36:27:5B:6A:55
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1IztGPaMoiaYP5-ZmhQGNidbalU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912F535/69A58078BA6611EEBC39626EC4F9AE02/A3048576EC3911EEA6178B13C4F9AE02.roa
Signing time: Mon 02 Mar 2026 14:01:10 +0000
ROA not before: Sat 21 Jun 2025 04:33:26 +0000
ROA not after: Thu 30 Jul 2026 00:00:00 +0000
asID: 138995
IP address blocks: 14.192.4.0/22 maxlen: 23
43.224.224.0/22 maxlen: 23
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912F535/69A58078BA6611EEBC39626EC4F9AE02/1IztGPaMoiaYP5-ZmhQGNidbalU.crl
rsync://rpki.apnic.net/member_repository/A912F535/69A58078BA6611EEBC39626EC4F9AE02/1IztGPaMoiaYP5-ZmhQGNidbalU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1IztGPaMoiaYP5-ZmhQGNidbalU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 28 Mar 2026 03:24:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 438 (0x1b6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912F535, serialNumber=D48CED18F68CA226983F9F999A140636275B6A55
Validity
Not Before: Jun 21 04:33:26 2025 GMT
Not After : Jul 30 00:00:00 2026 GMT
Subject: CN=69a59826-95a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:fc:46:3e:2a:ae:93:5a:dd:48:ff:c4:12:c1:
8b:6e:2a:59:6f:b9:8c:bf:1f:ec:98:b1:fd:cc:48:
94:e3:ee:b3:c0:ec:96:d5:db:99:96:14:82:a6:81:
39:65:41:0e:5c:47:3b:85:71:09:d6:a4:10:a2:05:
f8:1c:cb:a8:6e:33:e1:e1:c7:a9:1f:05:80:2f:62:
8c:c7:9c:ac:2e:e5:17:ac:00:90:4d:69:ef:5c:29:
aa:59:e0:65:9f:77:f2:4c:60:a8:f0:6a:ab:da:b9:
fa:30:93:43:e3:0e:2e:0e:ab:f8:78:e1:bc:57:d8:
c8:24:10:48:02:84:c3:03:27:76:0a:fc:71:aa:8a:
94:66:c1:f9:56:1a:84:51:00:56:1d:3e:52:67:56:
9e:84:d0:09:b6:f3:10:78:86:dc:b4:c7:50:eb:41:
18:51:51:96:10:5c:83:b7:cd:73:f3:52:92:30:49:
35:a2:83:41:68:af:be:b5:9f:b6:8f:61:21:59:5d:
a8:73:67:a7:66:e3:ae:de:64:08:2f:91:72:18:08:
26:0e:29:c2:39:1a:44:93:34:bb:c1:6f:d3:8d:28:
e9:06:d9:b9:32:39:f7:b9:28:60:cf:c9:7a:ec:a4:
32:82:a9:13:2d:54:79:60:38:c7:5d:28:c0:0b:09:
84:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:B7:53:38:57:40:FD:F1:E2:37:E8:32:1E:56:E6:F1:02:C4:4B:C4
X509v3 Authority Key Identifier:
keyid:D4:8C:ED:18:F6:8C:A2:26:98:3F:9F:99:9A:14:06:36:27:5B:6A:55
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912F535/69A58078BA6611EEBC39626EC4F9AE02/1IztGPaMoiaYP5-ZmhQGNidbalU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1IztGPaMoiaYP5-ZmhQGNidbalU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912F535/69A58078BA6611EEBC39626EC4F9AE02/A3048576EC3911EEA6178B13C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
14.192.4.0/22
43.224.224.0/22
Signature Algorithm: sha256WithRSAEncryption
83:4e:8b:f1:84:0b:24:7e:2c:8e:1c:57:72:a5:8d:5c:5c:3e:
1e:0d:c4:f2:f3:bd:c4:87:d9:d3:60:29:3f:f4:16:59:bb:b7:
37:f9:87:f3:46:21:14:bf:63:98:14:f5:4c:7a:94:b9:9a:89:
ba:0f:95:ab:26:08:59:05:e5:79:18:93:6f:9b:65:c4:84:12:
19:1e:ea:74:18:cd:d5:98:f6:ef:ec:34:2b:4c:64:5c:6f:92:
3d:e5:12:46:76:b3:9a:8b:5e:35:a0:68:84:5e:bc:9d:16:80:
3e:05:78:06:98:fb:f2:73:65:ef:4f:a2:4a:df:67:4a:71:69:
3c:e5:71:33:0f:3d:70:b3:5d:08:87:d0:fa:b2:cd:13:4c:f0:
e9:2d:d4:dd:14:12:8a:77:b0:a2:18:3e:b3:10:5f:2c:bf:dc:
d7:56:44:2c:cd:3a:4d:31:34:22:8e:3e:0b:ce:fe:91:00:fc:
58:61:0e:14:80:3f:13:34:76:57:d4:48:58:45:9a:bf:ea:b7:
d1:34:5b:f3:b0:aa:bb:da:51:8e:a1:13:f0:d4:ef:95:36:ce:
8b:c6:8d:3f:d8:c2:d8:81:00:76:d4:e0:ee:0b:c0:68:4b:d4:
15:1b:96:4f:e2:d5:7f:60:58:61:55:21:53:c8:31:fe:7c:77:
db:d5:ed:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 21 20:03:36 2026 by rpki-client